OSPF alfred

Step 1 建立校園骨幹 Dlink 3627 Lab, 含出口 Wan 建立 forti3950 學校 vlan and 10 筆靜態路由指到 Dlink 確認 dlink3627 與 forti 3950 學校 vlan 互通. Ex:3950 ERDC vlan 256 與教研 vlan Wan ip 是 ok 的 建立 N7K 與 3950 單一學校 ospf 路由交換用 vlan 設定 N7K 與 3950 間路由交換用 vlan interface 啟動 ospf Check nei Check topology table

Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route

OSPF 的開始 PC>ping Pinging with 32 bytes of data: Reply from : bytes=32 time=31ms TTL=254 Reply from : bytes=32 time=16ms TTL=254 Reply from : bytes=32 time=15ms TTL=254 Ping statistics for : Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 15ms, Maximum = 31ms, Average = 19ms PC>ping Pinging with 32 bytes of data: Request timed out. ??????? Why? N7k 尚未設定回來路由 Ospf 課程的開

Forti 3950 ospf router ospf 1 log-adjacency-changes area 1256 nssa network area 1256

Ospf command Review 1. router ospf process-id 2.ios only enable interface match network cmd 3. network widecard 4. area X

N7k ospf Router(config)#router ospf 1 Router(config-router)#net Router(config-router)#network area 1256 Router(config-router)#do sh ip ospf nei Neighbor ID Pri State Dead Time Address Interface FULL/DR 00:00: Vlan FULL/DR 00:00: Vlan FULL/DROTHER 00:00: Vlan30 Router(config-router)# 00:47:33: %OSPF-5-ADJCHG: Process 1, Nbr on Vlan200 from LOADING to FULL, Loading Done

redistribute Router(config-router)#redistribute connected su Router(config-router)#redistribute connected subnets Router(config-router)#redistribute st Router(config-router)#redistribute static ? metric Metric for redistributed routes metric-type OSPF/IS-IS exterior metric type for redistributed routes subnets Consider subnets for redistribution into OSPF tag Set tag for routes redistributed into OSPF Router(config-router)#redistribute sta Router(config-router)#redistribute static su Router(config-router)#redistribute static subnets Router(config-router)#

N7k Sh ip route Gateway of last resort is to network /24 is subnetted, 7 subnets O N /24 [110/20] via , 00:00:02, Vlan200 O N /24 [110/20] via , 00:00:02, Vlan200 O N /24 [110/20] via , 00:00:02, Vlan200 O N /24 [110/20] via , 00:00:02, Vlan200 O N /24 [110/20] via , 00:00:02, Vlan200 O N /24 [110/20] via , 00:00:02, Vlan200 O N /24 [110/20] via , 00:00:02, Vlan /16 is variably subnetted, 7 subnets, 3 masks O N /24 [110/20] via , 00:57:59, Vlan969 O N /24 [110/20] via , 00:00:02, Vlan200 O N /29 [110/20] via , 00:00:57, Vlan200 C /29 is directly connected, Vlan969 L /32 is directly connected, Vlan969 C /29 is directly connected, Vlan200 L /32 is directly connected, Vlan /16 is variably subnetted, 2 subnets, 2 masks C /24 is directly connected, Vlan30 L /32 is directly connected, Vlan /24 is variably subnetted, 2 subnets, 2 masks C /24 is directly connected, Vlan11 L /32 is directly connected, Vlan11 O N /24 [110/20] via , 00:57:59, Vlan969 S* /0 [1/0] via Router#ping Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5),

Ospf 常用指令 Sh ip ospf nei Sh ip ospf database

Fortigate Firewall 模擬學校 L3 Router 設定 模擬三個 vlan 及 一個 wan 模擬 fortigate 3950 一個 Vdom 設定 – 向下與 dlink 3627 Static Route – 向上與 cisco nexus 7K ospf 交換路由 Policy 設定 實作 Thin Ap controller

interface 設定 port – 給 Ip address – 給 dhcp 派 ip Create Vlan – 給 ip address 將 vlan 加到 port 設定 interface vlan ip 派 dhcp

Routing 設定 static route 設定 ospf

policy 設定 policy nat 設定 radius By 網段管理

Thin AP 三個部驟